Despite the prevalence of research that exists under the label of “information security
policies”(ISPs), there is no consensus on what an ISP means or how ISPs should be …

The cultivation of positive Information Security Culture (ISC) is an effective way to promote
security behavior and practices among employees in the organization. However, there is yet …

The ideal or strong information security culture can aid in minimising the threat of humans to
information protection and thereby aid in reducing data breaches or incidents in …

The continuous information security failures in organizations have led focus toward
organizational culture. It is argued that the development of culture of information security …

To improve organisational safety and enhance security efficiency, organisations seek to
establish a culture of security that provides a foundation for how employees should …

Abstract Information security programs are instituted by organizations to provide guidance to
their users who handle their data and systems. The main goal of these programs is to foster …

Ensuring employees' compliance with information security controls is a major challenge
experienced by the management of information security in organisations. While the …

For three decades, research has investigated the role of information systems integration (ISI)
in mergers and acquisitions (M&As). This research has improved our understanding of the …

Managing information security in Information Technology (IT) outsourcing is important. We
conduct a Delphi Study to identify key information security concerns in IT outsourcing. A …

Purpose Employee behaviour is a continuous concern owing to the number of information
security incidents resulting from employee behaviour. The purpose of this paper is to …